Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa
File:                     3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier:          G6e1r3DRuRea+xhgobcaC8YJTmew1ogfm81bEXCrCm0=
Subject key identifier:   B6:19:03:5C:86:DF:0A:F8:62:84:57:FA:22:92:63:C8:78:0D:AC:E0
Certificate issuer:       /CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
Certificate serial:       270B54184F3738162768E00C9EC68CAC6BD1C2F2
Authority key identifier: 3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa
Signing time:             Sun 03 May 2026 03:10:20 +0000
ROA not before:           Sun 03 May 2026 03:05:20 +0000
ROA not after:            Sun 02 May 2027 03:10:20 +0000
asID:                     137311
IP address blocks:        103.109.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl
                          rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 09:32:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:0b:54:18:4f:37:38:16:27:68:e0:0c:9e:c6:8c:ac:6b:d1:c2:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D36B37BDE25595112D2BB921B7F36C6A161CBA1
        Validity
            Not Before: May  3 03:05:20 2026 GMT
            Not After : May  2 03:10:20 2027 GMT
        Subject: CN=B619035C86DF0AF8628457FA229263C8780DACE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b0:c7:03:eb:12:bc:ea:9c:d1:5f:b3:53:2d:
                    df:ed:41:a3:39:bb:b1:f7:22:8b:d0:b5:da:67:8e:
                    0c:0c:ec:b8:c3:0f:00:bf:ac:88:6e:e1:09:08:34:
                    30:c5:42:f3:8b:e3:e1:43:76:d3:23:f1:b7:2a:11:
                    70:10:25:8e:11:07:0f:47:9e:ef:2a:03:0f:60:6e:
                    d4:71:6e:6b:08:05:05:a3:21:00:b3:d3:6e:be:d8:
                    a5:43:3b:a0:29:8f:e8:60:e6:95:43:a3:d4:46:e6:
                    16:f4:b9:7f:c1:19:c1:85:f5:33:72:2e:ca:cb:b0:
                    ed:8c:e4:35:15:11:2f:aa:2d:f4:9e:40:c2:a4:af:
                    c9:46:29:91:db:f2:3d:45:8b:f0:f7:fb:13:04:63:
                    a2:f5:2d:61:07:6a:d4:26:91:56:b6:25:c5:c0:db:
                    77:dc:1c:d5:85:01:ac:ca:b7:eb:d8:a1:c6:31:e9:
                    f0:9a:a0:9f:2a:35:ae:c2:a0:d3:9d:4f:00:a5:b6:
                    38:00:d5:6c:7a:27:46:9b:50:e4:9f:b0:7d:f2:e3:
                    18:2e:68:cd:f3:73:fa:90:74:66:88:31:b4:6c:09:
                    a7:07:41:0d:3a:8a:35:98:36:f8:9e:19:67:43:06:
                    7b:6c:64:fe:d8:23:4d:f4:83:6e:a2:39:6b:64:33:
                    7f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:19:03:5C:86:DF:0A:F8:62:84:57:FA:22:92:63:C8:78:0D:AC:E0
            X509v3 Authority Key Identifier:
                keyid:3D:36:B3:7B:DE:25:59:51:12:D2:BB:92:1B:7F:36:C6:A1:61:CB:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/3D36B37BDE25595112D2BB921B7F36C6A161CBA1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32372e302f32342d3234203d3e20313337333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:d5:56:2e:6b:dc:f9:34:97:88:06:91:f9:1d:d1:3d:12:22:
         02:f4:f1:89:16:d6:b9:b2:f6:76:12:d2:d5:34:e0:0f:ab:78:
         b9:a1:30:2c:33:5d:59:96:17:3a:40:14:60:84:cc:93:aa:f3:
         eb:6d:e3:46:9a:a4:4b:71:bb:67:26:e3:ab:75:d4:4a:7f:38:
         6b:1c:3d:ca:b8:ed:34:49:27:de:85:79:ae:41:b8:9a:30:91:
         1a:4b:17:4c:6f:5c:e6:12:e6:5f:2f:7b:b3:b4:27:46:39:92:
         81:63:38:11:d9:e7:03:c2:01:ae:dd:cf:1e:ae:c2:3f:32:27:
         8d:2a:62:cb:7b:0d:1b:1c:06:08:f0:43:bc:7f:90:5d:f6:bd:
         97:85:38:44:47:d1:0f:0e:4d:75:84:7c:b2:6e:1e:50:2f:8a:
         f9:14:8b:cb:3f:55:1f:4a:40:2e:fd:cb:08:9b:0d:80:d9:a9:
         66:d8:75:2d:50:89:65:ef:41:e3:36:e0:63:3c:01:0b:52:9b:
         fc:21:bd:12:81:67:a5:f3:c5:25:19:46:d2:b5:e4:09:ac:95:
         97:90:46:77:50:ad:33:54:e3:c8:cc:e7:24:f7:79:ac:6b:e2:
         d4:09:48:e0:1e:34:b8:14:bb:5d:e7:de:20:cc:a1:37:76:9e:
         5a:ab:2e:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:25:52 2026 by rpki-client